Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-36387
5.4
MEDIUMCVSS v3
Published
September 6, 2023
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
An improper default REST API permission for Gamma users in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma user to test database connections.
apache/superset
GitHubApache Superset is a Data Visualization and Data Exploration Platform
GitHubApache Superset is a Data Visualization and Data Exploration Platform<= 2.1.0NVD